Assign user to group in Azure Active Directory using Microsoft Graph PHP SDK

Question

I am getting various error messages depending on various attempted implementations to achieve the mentioned issue. Here is what I tried to do:

Assign group on user creation

//Get group object

$group = $graph->createRequest('GET', "/groups/xxxxx-xxxxx-xxxx-xxxx-xxxxx")
      ->setReturnType(Model\Group::class)
      ->execute();

$newUser = new Model\User();
$newUser->setGivenName($firstName);
$newUser->setSurname($surname);
$newUser->setUserPrincipalName($userPrincipalName.'@xxxxxx.com');
// $newUser->setUserType($userType);
// $newUser->setMySite($website);
$newUser->setPasswordProfile(["forceChangePasswordNextSignIn" => false,'password' => $pwd]);
$newUser->setDisplayName($firstName.' '.$surname);
$newUser->setMailNickname($firstName.$surname);
$newUser->setMemberOf([$group]);
$newUser->setAccountEnabled(true);

$user = $graph->createRequest($action, "/users")
      ->attachBody($newUser)
      ->setReturnType(Model\User::class)
      ->execute();

Assign membership through group object

//we get $user object from the last line above     
$grp = $graph->createRequest('POST', "/groups/xxxxx-xxx-xxxx-xxxx-xxxxxxx/members/\$ref")
      ->attachBody(["@odata.id" => $graph->$_baseUrl.'/'.$graph->$_apiVersion.'/users/'.$user->id])
      ->setReturnType(Model\Group::class)
      ->execute();

None of the above strategies work. I'd really appreciate pointers to where I am going wrong. Thank you in advance.

What are the "various error messages" you are getting?

Marc LaFleur
– Marc LaFleur

2018-03-09 15:09:44 +00:00
Commented Mar 9, 2018 at 15:09 — Marc LaFleur
– Marc LaFleur, Commented Mar 9, 2018 at 15:09

Philippe Signoret · Accepted Answer · 2018-03-09 21:06:36Z

1

I'm not sure if your first approach (referencing the group as part of memberOf when creating the user) is supported.

You second approach has a couple issues:

By using $graph->$_baseUrl and $graph->$_apiVersion, you are attempting to reference private properties of $graph, which you cannot do (because they're private). See the PHP documentation for more information on visibility.
You are attempting to reference the user's id attribute with $user->id. This would work only if $user had a public property named id (which it doesn't). Instead, you need to use the getter for the id: $user->getId().

An approach that works is the following (which is a slight variation of your second attempt):

// Add $user as a member of $group
$newMemberRef = 'https://graph.microsoft.com/v1.0/users/' . $user->getId();
$groupMembersRef = '/groups/' . $group->getId() . '/members/$ref';
$response = $graph->createRequest('POST', $groupMembersRef)
            ->attachBody(['@odata.id' => $newMemberRef])
            ->execute();

(Note how in this case we're referencing a user object, though you could also reference a group object, or (more generically) a directoryObject object.)

answered Mar 9, 2018 at 21:06

Philippe Signoret

14.5k2 gold badges45 silver badges63 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Masinde Muliro Over a year ago

All along I though the problem was with the SDK.

Collectives™ on Stack Overflow

Assign user to group in Azure Active Directory using Microsoft Graph PHP SDK

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related